---
title: "Discussion on \"An object-storage ACL is not application authorization\" | Hashnode"
description: "Discussion on \"An object-storage ACL is not application authorization\". Are backup/export jobs scoped per tenant in policy, or do they inherit a god-mode storage role?\nIf someone pastes a stale CDN or object URL, does anything re-check live access?\n\nObject storage ACLs pr"
url: "https://hashnode.com/posts/an-object-storage-acl-is-not-application-authorization/6ac0b291dda6eb0beb99ad41"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [An object-storage ACL is not application authorization](https://authbyexample.hashnode.dev/an-object-storage-acl-is-not-application-authorization?utm_source=hashnode&utm_medium=feed)

Are backup/export jobs scoped per tenant in policy, or do they inherit a god-mode storage role? If someone pastes a stale CDN or object URL, does anything re-check live access? Object storage ACLs pr

Oct 3 · 1 min read · authbyexample.hashnode.dev  
Read the article

-   [#authorization](https://hashnode.com/tag/authorization)
-   [#access-control](https://hashnode.com/tag/access-control)

## Written by

[Auth By Example](https://hashnode.com/@authbyexample)

@authbyexample

  
[View profile](https://hashnode.com/@authbyexample)

Practical lessons on auth, authorization, and access control.

Practical lessons on auth, authorization, and access control.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.